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Multi -protocol label switching edge router for internet, has label 
information table storage unit to store information to route label 

packet to internet protocol network and interface information to 

transmit packet to nexthop 
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Abstract (Basic): US 20050169264 Al 

NOVELTY - The router has a label information table storage unit 
(808) to store nexthop information to route a label packet to an 
internet protocol (IP) network and interface information to transmit 
the packet to a nexthop. A multi -protocol label switching forwarding 
engine deletes a label by accessing the storage unit and searching the 
interface information. An IP packet is transmitted to an interface on 
receiving the label packet. 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are also included for the 
following: 

(A) a method of controlling a mul ti -protocol label switching 
edge router 

(B) a program storage device with a program of instructions 
executable by the machine to perform a method of controlling a 
multi -protocol label switching edge router . 

USE - used in an internet for operating an interior gateway 
protocol and a border gateway protocol . 

ADVANTAGE - The label information table storage unit stores nexthop 
information to route the label packet to the internet protocol (IP) . 
network and interface information to transmit the label packet to 
the nexthop, thus reducing multiple look-up loading on transmitting the 
label packet to the IP network. The router thus reduces delay in a real 

packet transfer and achieves high speed packet switching of a 
multiprotocol label switching. 

DESCRIPTION OF drawing (S) - The drawing shows a block diagram of a 
multiprotocol label switching forwarding engine. 

Packet reception unit (801) 

Forwarding control unit (802) 

Packet transmission unit (803) 

Out segment table search unit (806) 

Label information table storage unit (808) 
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Wireless payment system in e.g. parking lot, acquires individual 
identification from vehicle equipment and permits approach of vehicle 
without waiting for credit determination result from center apparatus, 
when vehicle is at inlet port 
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Abstract (Basic): JP 2004348321 A 

NOVELTY - An inlet port roadside machine (100) acquires 
individual identification ( ID ) from vehicle equipment (500) and 
permits approach of a vehicle (400) without waiting for credit 
determination result from a center apparatus (300), when vehicle is at 
the inlet port . When vehicle approaches the exit, ID is acquired 
again by an exit roadside machine (200). Payment is determined 
based on individual ' ID and credit determination result. 

DETAILED DESCRIPTION - An INDEPENDENT CLAIM is al SO included for 

roadside machine for wireless payment. 

USE - For charge payment for parking lot, toll road, petrol refuel 
station. 

advantage - Traffic congestion is prevented as there is no need 
to wait at the entrance for credit determination result. 

DESCRIPTION OF DRAWING(S) - The figure shows a conceptual diagram 
of the wireless payment system. (Drawing includes non-English language 
text) . 

inlet port roadside machine (100) 

exit roadside machine (200) 

center apparatus (300) 

vehicle (400) 

vehicle equipment (500) 
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Abstract (Basic): US 20040092264 Al 

novelty - An interface identifier associated with a new access 
router (nr) is determined, interface information on the new access 
router is obtained from the current access router (CR) using the 
determined identifier . 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are al so included for the 
following: 

(1) system for enabling mobile node; and 

(2) method for communicating between mobile node and current access 
router. 

USE - For enabling mobile node such as wireless device in wireless 
communication network such as internet, to undergo hand-over from 
current access router (CR) to new access router (NR) . 

advantage - The capabilities of the network interface are 
identified before hand-over. Hence efficient hand-over is achieved and 
the load of the current router is reduced. 

DESCRIPTION OF DRAWING (S) - The figure shows the flowchart 
-explaining the network interface capability acquisition process. 
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Abstract (Basic): US 20030128688 Al 

novelty - The multi protocol label switching (MPLS)- label edge 
router (ler) system has many line interfaces (lims) (21-1,21-2) 
configured to process asynchronous transfer mode (ATM) traffic by 
matching it with an internet protocol (IP) equipment and label 
switching router (LSR) . The input forwarding engines (FEs) (22-1,22-2) 
are configured to transmit IP and MPLS packet received through each LIM 
without being connected to them. 

DETAILED DESCRIPTION - An INDEPENDENT CLAIM is al SO included for a 
method for establishing connections of an ATM based MPLS-LER system. 

USE - used for establishing connections in computer networks e.g. 
internet. 

advantage -The MPLS-LER system improves the transmission 
capability across the network . The fes limits additional connections 
that need to be made within the system hence repair and maintenance of 
the connections can be done easily. 

DESCRIPTION OF drawing(S) - The drawing illustrates the structure 
of an ATM based MPLS-LER system. 

lims (21-1,21-2) 

fes. (22-1,22-2) 
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image capturing apparatus for trunk road combines single image frames 
sequentially for viewing and simulation of continuous motion along 



selected path 

patent Assignee: HEWLETT-PACKARD CO (hewp ) 
inventor: cheatle s p; hall g p; hunter a a; pollard s b 
Number of Countries: 001 Number of Patents: 002 
Patent Family: 

patent No Kind Date Applicat No Kind Date Week 

GB 2378605 A 20030212 GB 200214820 A 20020627 200331 B 

GB 2378605 B 20031231 GB 200214820 A 20020627 200403 

Priority Applications (No Type Date): GB 200116300 A 20010704 
Patent Details: 

Patent No Kind Lan Pg Main IPC Filing Notes 

GB 2378605 A 18 H04N-007/18 

GB 2378605 B H04N-007/18 

Abstract (Basic): GB 2378605 A 

novelty - Apparatus comprises image capture devices (10) spaced 
along routes that may branch, join or cross, means for selecting a 
navigation path, and means for sequentially combining image frames to 
simulate motion along the selected navigation path. Further routes can 
be selected while motion along the partial navigation path is being 
simulated and the user can input path end points. Progress of a person 
or object along the routes can be tracked and a single image frame 
captured by a sequence of capture devices is combined sequentially and 
viewed at a predetermined frame rate to simulate continuous motion 
along the selected navigation path. The frames are interpolated, audio 
data can be provided, capture devices can be addressed independently 
and a website access point (12) can take the frames. 

detailed description - There are independent claims for: 

(1) A route-finding apparatus 

(2) A method of providing an image sequence 

USE - Apparatus is for surveillance cameras along trunk roads for 
monitoring traffic conditions. 

advantage - Apparatus enables selection of parts of a route and 
supports arbitrary and unlimited end-to-end navigation. It enables 
journeys to be planned and rehearsed 

description OF drawing (S) - The figure shows the image capture 
apparatus 

image capture devices (10) 

website access point (12) 
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Abstract (Basic): US 20020016855 Al 

NOVELTY - The source address of the incoming packet is compared 
with the IP addreses allocated to subscribers of services provided by 
two operating service networks which are interfaced and not interfaced 
with the router respectively, when the address matches the address 
of one of the service network, packet is forwarded to the router in 
that network, and when the address matches the address of other 
network, packet is encapsulated and forwarded. 

USE - For operating router in network access devices such as 
personal computer, information appliance, personal diqital assistant, 
data-enabled wireless handset, and also access network architectures 
■ such as DSL, wireless, satellite etc. 

advantage - since addresses are allocated to network service 
providers, packets are transmitted from the network access device to 
appropriate service network. Packets traveling between network access 
devices connected to the same access network infrastructure, are 
forwarded directly between the devices in the access network , thereby 
bandwidth, is reduced. Permits the dynamic allocation, assignment, and 
reassignment of IP addresses to several network access devices 
based on customer subscriptions to particular services. Allows service 
selection to be implemented without requiring network service providers 
to connect physical facilities into, for e.g. cable head in HFC based 
network, thereby cost is reduced. 

DESCRIPTION OF drawing(S) - The figure shows the flowchart of 
router processing method. 
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Abstract (Basic): KR 2001054219 A 

NOVELTY - A parallel process connecting method in an ATM ultra-high 
communication network is provided to heighten the efficiency of a trail 
connection service by simultaneously transmitting a subnetwork 
connection operation related to each trail to a corresponding 
subnetwork managing system and performing a subnetwork connection 
operation. 

detailed DESCRIPTION - when a network linking administrating 
unit(200) receives two points where a trail has been set from a network 
service system(210) . At this time, if the trail to be generated is an 
internal trail in a virtual path hierarchical network, the point where 
the link is set is received as a link termination point(LTP). If it is 
a link between termination points of a network, the point where the 
trail is set is received as an address recognized by a service user, 
and an ltp is searched with the address. At this time, the network 
linking administrating unit(200) recognizes an administration state of 
the point where the trail is to be set, and determines whether a trail 
can be set. If a trail can be set, a network linking administrating 
unit(200) generates a trail module(201), generates a trail ID for the 
corresponding trail, selects a path satisfying a linking attribute 
requested by the network service system(210). Then, the network linking 
administrating unit (20) detects a partial network on the linking 
path module(202) and requests a corresponding partial network 
administrating system(220) to generate a trail termination point for 
linking the partial network and the internal trail . A trail 
receiving termination module(204) generates a network trail termination 
point and requests path information of the partial network linking 
from the partial network administrating system(220). The the partial 
network path information is received from the partial network 
administrating system(220), a band width and virtual path ID or a 
virtual channel ID are allocated to the link termination point , 
and the trail generation and the trail ID are inform the network 
service system(210) , so that a loop according to generation of the 
trail is completed. 
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address port which inputs data during 
a second cycle and data for presetting an access mode during a first 
cycle. A register stores the data for presetting the access mode. A 
read/write unit access the memory in accordance with address data 
inputted from the address port during the second cycle and the data 
for presetting the access mode stored in the register. 

The data is stored in the first register prior to the second cycle 
during which accesses by the read/write unit to the memory elements are 
performed. The address data is presented onto the address port 
during the second cycle and all of the address data is used for . 
specifying an address location at a memory address during the second 
cycle. The first cycle does not over lap the second cycle, 

use/advantage - For use as frame buffer in high speed graphic 
display system. Suitable for multi processor parallel operations. 
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25 etc. The routing table 104 has the following entries. 
.Agent routing table ©protocol, Local ID , Sequence 
Number; Source Port Number, Destination Port 
Number; Source Port Numbernew, Destination Port 
Numbernewl = (4/6, 31 SNsiave 3; SourcePortslave 3, 
DestPortslave. . . 

. . .same as that 
indicated in the PicolP packet. The source address is 
a special IP address assigned to the access point , 
e.g., the IP address of the interface that is 
connected to the internet 98. The agent then replaces 
5 the source port. . . 

...is available and present in the fixed Internet, if 
so, the agent replies with an empty packet, pursuant 
to normal route setup reply procedures, and adds the 
entry to the PicolP routing table, if the 



determination. 
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time these exchanges may occupy. 

7 1 GATEOPEN 

The GATEOPEN message is sent by the Edge Router to its corresponding 
Edge Router at the other end of a connection on receipt... 

...the COMMIT message. 

7 1.1 GATEOPEN Acknowledgment 

On receipt of a GATEOPEN message, the Edge Router responds with a 
GATEOPENACK. A sample message is. 
GATEOPENACK 21T6572 vl .0; 
7 1.2 GATEOPEN Error 

if some error occurs in the processing of a GATEOPEN, the Edge Router 
25 responds with GATEOPENNAK. Such ...BTI in a SETUPNAK message. 

7 2 GATECLOSE 

The GATECLOSE message is sent by the Edge. Router to its corresponding 

Edge Router at the other end of a connection on receipt of the 
release message from the bti . The Edge Router ' releases any resources 
held by that gate, stops any 5 unsolicited grants offered on the... 

... security code required. 

7 2.1 GATECLOSE Acknowledgment 

On receipt of a GATECLOSE message, the Edge Router responds with a 
GATECLOSEACK. A sample message is. 



GATECLOSEACK 2IT6583 vl.0; 
7 2.2... 



. ..GATECLOSE message always results in a response of 
GATECLOSEACK. if the GATE ID parameter specifies an invalid gate, the 
Edge Router assumes the gate has already been closed. 

7.9 Gate Controller to Gate Controller 
Messages. . . 



19/3.K/18 (Item 18 from file: 349) 

DIALOG (R) File 349:PCT FULLTEXT 

(c) 2006 wiPO/Univentio. All rts. reserv. 

00545448 

A METHOD FOR EXCHANGING SIGNALING MESSAGES IN TWO PHASES 

PROCEDE POUR ECHANGER DES MESSAGES DE SIGNALISATION EN DEUX PHASES 

Patent Applicant/Assignee: 

AT & T CORP, 

inventor(s) : 

kalmanek Charles Robert Jr, 

MARSHALL William Todd, 

MISHRA Partho Pratim, 

nortz Douglas M, 

ramakrishnan Kadangode K, 
Patent and Priority information (Country, Number, Date): 

Patent: WO 200008821 Al 20000217 (WO 0008821) 

Application: WO 99US17593 19990804 (PCT/WO US9917593) 

Priority Application: US 9895288 19980804; US 98104878 19981020 
Designated States: 

(Protection type is "patent" unless otherwise stated - for applications 
prior to 2004) 

CA JP MX AT BE CH CY DE DK ES FI FR GB GR IE IT LU MC NL PT SE 
Publication Language: English 
Full text word Count: 38739 

Patent and Priority Information (Country, Number, Date): 

Patent: ... 20000217 

Full text Availability: 

Detailed Description 
Publication Year: 2000 

Detailed Description 

... time these exchanges may occupy. 

7 1 GATEOPEN J 

The GATEOPEN message is sent by the Edge Router to its corresponding 

Edge Router at the other end of a connection on receipt... 

...the COMMIT message. 

7 1.1 GATEOPEN Acknowledgment 

On receipt of a GATEOPEN message, the Edge Router responds with a 
GATEOPENACK. A sample message is. 

GATEOPENACK 2IT6572 vl.O; 
7 1.2 GATEOPEN Error 

if some error occurs in the processing of a GATEOPEN, the Edge Router 
25 responds with gateopennak. Such a situation can occur when the remote 
gate times out. . . 

. . . BTI in a setupnak message. 

7 2 GATECLOSE 



The GATECL05E message is sent by the Edge Router to its corresponding 

Edge Router at the other end of a connection on receipt of the 
RELEASE message from the BTI. The Edge Router releases any resources 
held by that gate, stops any unsolicited grants offered on the upstream 



...security code required. 
7 2.1 GATECLOSE Acknowledgment 

On receipt of a GATECLOSE message, the Edge Router responds with a 
GATECLOSEACK. A sample message is. 

GATECLOSEACK 21T6583 vl.O;. 
7 2.2. . . 

...GATECLOSE message always results in a response of 
GATECLOSEACK. if the GATEID parameter specifies an invalid gate, the 
Edge Router assumes the gate has already been closed. 

.7.9 Gate Controller to Gate Controller 
Messages. . . 
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time these exchanges may. occupy. 

. 7 1 GATEOPEN 

The GATEOPEN message is sent by the Edge Router to its corresponding 
Edge Router at the other end of a connection on receipt a GATEOPEN 
message, the Edge Router responds with a 
GATEOPENACK. A sample message is. 



GATEOPENACK 21 T6572 vl .0; 
7 1.2 GATEOPEN Error 



if some error occurs in the processing of a GATEOPEN, the Edge Router 
responds with GATEOPENNAK. Such a situation can occur when the remote 
gate times out and... 

. . bti in a SETUPNAK message. 

7 2 GATECLOSE 

The GATECLOSE message is sent by the Edge Router to its corresponding 

Edge Router at the other end of a connection on receipt of the 
release message from the BTI. The Edge Router releases any resources 
held by that gate, stops any unsolicited grants offered on the upstream 



...security code required. 
7 2.1 GATECLOSE Acknowledgment 

On receipt of a GATECLOSE message, the Edge Router responds with a 
GATECLOSEACK. a sample message is. 

GATECLOSEACK 21 T65 83 V 1.0... 

...GATECLOSE message always results in a response of 
GATECLOSEACK. if the gate id parameter specifies an invalid gate, the 
Edge Router assumes the gate has already been closed. 

7.9 Gate Controller to Gate Controller 
Messages. . . 



19/3.K/20 (Item 20 from file: 349) 

DIALOG (R) Fi 1 e 349:PCT FULLTEXT 

(c) 2006 wiPO/Univentio. All rts. reserv. 

00545446 

A METHOD FOR PERFORMING GATE COORDINATION ON A PER-CALL BASIS 
PROCEDE POUR ASSURER UNE COORDINATION DES PORTES A L'APPEL 

Patent Applicant/Assignee: 

AT & T CORP, 
inventor(s): 

kalmanek Charles Robert Jr, 

MARSHALL William Todd, 

MISHRA Partho Pratim, 

NORTZ Douglas M, 

ramakrishnan Kadangode K, 
Patent and Priority information (Country, Number, Date): 

Patent: WO 200008819 Al 20000217 (WO 0008819) 

Application: WO 99US17590 19990804 (PCT/WO US9917590) 

Priority Application: US 9895288 19980804; US 98104878 19981020 
Designated States: 

(Protection type is "patent" unless otherwise stated - for applications 
prior to 2004) 

CA JP MX AT BE CH CY DE DK ES FI FR GB GR IE IT LU MC NL PT SE 
Publication Language: English 
Full text word Count: 37688 

Patent and Priority information (Country, Number, Date): 

Patent: ... 20000217 

Full text Availability: 

Detailed Description 
Publication Year: 2000 

Detailed Description 

time these exchanges may occupy 

7 1 GATEOPEN 

The GATEOPEN message is sent by the Edge Router to its corresponding 
Edge Router at the other end of a connection on receipt... in the- COMMIT 
message. 



1.1 GATEOPEN Acknowledgment 

On receipt of a GATEOPEN message, the Edge Router responds with a 
GATEOPENACK. A sample message is. 

GATEOPENACK 2IT6572 vl.0; 
7 1.2 GATEOPEN Error 

if some error occurs in the processing of a GATEOPEN, the Edge Router 
25 responds with GATEOPENNAK. Such a situation can occur when the remote 
gate times out . . . 

.to the BTI in a SETUPNAK message. 

GATECLOSE 

The GATECLOSE message is sent by the Edge Router to its corresponding 

Edge Router at the other end of a connection on receipt of the 
RELEASE message from the BTI. The Edge Router releases any resources 
held by that gate, stops any unsolicited grants offered on the upstream 



...security code requited. 
7 2.1 GATECLOSE Acknowledgment 

On receipt of a GATECLOSE message, the Edge Router responds with a 
GATECLOSEACK. A sample message is. 

GATECLOSEACK 2IT6583 vl.O; 

7 2.2. . . * 

...GATECLOSE message always results in a response of 
GATECLOSEACK. if the GATE ID parameter specifies an invalid gate, the 
Edge Router assumes the gate has already been closed. 
7.9 Gate Controller to Gate Controller 
Messages. . . 
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Detailed Description 

... time these exchanges may occupy. 

7 1 GATEOPEN 

The GATEOPEN message is sent by the Edge Router to its corresponding 
Edge Router at the other end of a connection on receipt... 

...the COMMIT message. 

7 1.1 GATEOPEN Acknowledgment 

On receipt of a GATEOPEN message, the Edge Router responds with a 
GATEOPENACK. A sample message is. 

GATEOPENACK 2IT6572 vl.O; 

7 1.2 GATEOPEN Error 

if some error occurs in the processing of a GATEOPEN, the Edge Router 
responds with GATEOPENNAK. Such a situation can occur when the remote 
gate times out and...BTl in a SETUPNAK message. 

7 2 GATECLOSE 

The GATECLOSE message is sent by the Edge Router to its corresponding 

Edge Router at the other end of a connection on receipt of the 
RELEASE message from the bti. The Edge Router releases any resources 
held by that gate, stops any unsolicited grants offered on the upstream 



...security code required. 
7 2.1 GATECLOSE Acknowledgment 

On receipt of a GATECLOSE message, the Edge Router responds with a 
GATECLOSEACK. A sample message is. 

GATECLOSEACK 2IT6583 vl .0; 
7 2.2... 

...GATECLOSE message always results in a response of 
GATECLOSEACK. if the Gateid parameter specifies an invalid gate, the 
Edge Router assumes the gate has already been closed. 
7.9 Gate Controller to Gate Controller 
Messages... 
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... Access - ASIC Parity immediate parity gen. no error 
Gen. Fault fault 

I/O Single-side Access - ASIC PCI Data immediate bad address no 
error 

Path Fault 

I/O Non-single-side Access, Different C- immediate transmit error... 
. . .on the Xbus. 
Board Breaking and information Latching 

There are several status bits in the Broken Status register on each 
board to determine the mason a board went broken. These bits... 
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FIFO for the second switch fabric and then returns to 
start at 70. if the path is broken and no alternative path is 
available, the cell is discarded at 130, It will be appreciated 
that this testing... to 

deal with "blocked ports". According to this embodiment, another 
arbitration FIFO is created for pointers to vcs having blocked 

ports , The blocked port arbitration FIFO is then given the 
highest priority, Since the presence of a single blocked port 



could, under this system, prevent all cells from being 
transmitted until a particular port becomes un-blocked, the 
pointers in the blocked port arbitration FIFO are preferably 
recycled each time a pointer encounters a blocked port . in other The 
cell buffering systems described above are suitably used 
to buffer cells entering... 

..cells exiting the ATM switch when 

no traffic shaping is required, e.g. constant bit rate (CBR) 

traffic . Alternatively, the buffering system described above can 
be used in conjunction with the traffic shaping... 

..owned application. Still 

alternatively, the buffering system described above can be 
employed where the cells exit the switch and modified to 
accomplish traffic shaping. Figure 6 shows a buffer system 
according to the. . . 
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tools they use can help you, too. 

NetStumbler identifies and tracks information about any wireless 
access point it can see, including a mac address , wep status and a 
channel, its graphical interface will track those over time, giving you 
an analysis of network capability . 

Sure, NetStumbler is great for detecting and penetrating naked 
networks. And because it creates a... 
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out on top in our tests. But its rivals can move quickly in a rapidly 
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June 10, 2002 
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use NAT on all your clients. However, you can map NAT addresses to 
external IP addresses statically using the management interface . we 
found this feature helpful to support our access points , which, without 
IP addresses , would have been unreachable from the outside network. 
ReefEdge offers two versions of its ConnectBridge. . . 

. . .ConnectBridge 25 for support of a single access point only; the 
ConnectBridge 100 supports higher speed traffic . The ConnectBridge 25 
is limited in capacity, we managed only 8 Mbps of throughput unencrypted... 
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WAVEBASE: A GATEWAY TO WIRELESS HEAVEN -- Its broad feature set, solid 

performance and ability to enable multiple concurrent vpn sessions earned 
Nexland's SOHO wireless gateway our Editor's Choice award. (Hardware 
Revi ew) (Eval uati on) 

Mol ta , Dave 

Network Computing, 53 

Oct 29, 2001 

DOCUMENT TYPE: Evaluation ISSN: 1046-4468 LANGUAGE: English 

RECORD TYPE: Full text 

WORD COUNT: 5791 LINE COUNT: 00455 

VPN dialer software installed, we attempted to connect to the Cisco 
vpn gateway through the access point . Once one vpn tunnel was 
established, we would establish another tunnel with a second client behind 



the access point to see if the device under test could handle multiple 
tunnels. If two worked, we would try a third. Most of the access points 

failed after the second tunnel , usually by terminating previously 
established VPN connections. 

Security Log test: For our security log test, we ran port scans on 
the various access points and checked to see if the logs would report 
the scans. Hackers often use port... 

...the LANguard Port Scanner on a Microsoft windows 2000 Professional 
workstation and scanned the wan port IP addresses of the various 
access points . we then searched the configuration web pages for logs and 
looked to see if there... 
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WORD COUNT: 1418 . LINE COUNT: 00122 

Fast Ethernet switch ports. The Dl-713 firewall functions allow 
users to block and redirect ports , as well as mask local IP addresses 
--making targeting a specific machine more difficult for intruders. Oh a 
dynamic network connection, the D-Link access point will automatically 
obtain an IP address and forward additional IPs to multiple clients on 
the network . The bandwidth data-transmission rate can be set manually 
or for a dynamic autosensing configuration through a web-based management 
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side, it's important to understand exactly how Nics fit into the 
design of your network . 

On the server. side, bandwidth and management requirements dominate. 
Bandwidth needs are addressed by both processor strength and the number... 

...deliver only 100 Mbps. On a very heavily trafficked server, this may not 
allow optimal access to server resources, to address this problem, 
multiple- port server cards let you add several connections to a server 
without eating up precious expansion... 

...minihubs or routers for smaller network installations. Because you can 
bind different protocols and network addresses to each port , multiple 
connections let you physically separate server-side traffic, creating 
multiple, separate subnets to access... 
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preserve existing infrastructure. Both devices provide a good 
solution for disparate workgroups requiring high-speed access to servers 
across multiple subnets. 

The immaturity of the Gigabit Ethernet market was apparent in our 
tests... 

...interoperability problems between the Foundry switches and a Gigabit 
Ethernet Alteon Networks Inc. NIC. The link came up after we disabled 
the auto-negotiation feature on the NIC, but this situation illustrates the 
gambles taken when... 

...and advanced IP filtering capabilities. Netiron can filter based on 
source address, source mask, destination address , destination mask, and 
TCP or UDP port . Fastiron has similar capabilities but does not provide 
support for TCP and UDP (user Datagram. . . 

...inability to produce traps on the filtered events disappointing. 

Foundry breaks new ground in its ability to prune multicast traffic 
at Gigabit Ethernet speeds, in our tests, the switches could limit the 
- multicast of IGMP... 
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checks it for consistency, then retransmits it to the other LAN 
segment. This can add latency time to packet transmission because the 
device waits for the entire packet to arrive. However... 

...for Access Points. The first is the default workgroup Bridge Mode, in 
which the Access Point learns addresses from both the wireless and 
wired Ethernet ports and forwards all packets with unknown addresses . in 
the alternative Full Bridge Mode, the Access Point learns addresses 
from the wireless side of the network only and will only forward packets to 
multicast .. .operates as a Data Link layer relay, making the Access Point 
transparent to network protocols. Access Points learn the network 
addresses of network nodes dynamically, using a technique called reverse 
learning to associate network node addresses and port numbers. Each 
Access Point can add new source addresses to its address database 
automatically. This allows automatic configuration of the network to occur 
independently of a protocol... 
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4) built-in 10/100 Mb Auto-Negotiation full duplex Fast Ethernet 
Switch ports increase network access speed for client computers. 

D-Link's di-714P+'s firewall provides a secure broadband connection 
to stop hackers in their tracks without sacrificing speed . The router's 
Stateful Packet inspection feature examines each inbound packet and 
rejects data not requested by a client on... 

...Address, IP Address and Domain Name. Once enabled, the DHCP server will 
automatically assign IP addresses to wireless clients, allowing other 
computers to access the router and internet seamlessly, virtual 
Private Network (VPN) pass through support is provided for multiple 
simultaneous . . . 

...DI-714P+ employs the basic parental control features of URL blocking, 
Domain blocking and IP address blocking, accessed through the web-based 
configuration interface . URL blocking allows blocking of web sites whose 
domain names contain specific blocked words. Domain... 
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product combining CAM (content addressable memory) technology with special i 
zed 

logic and a high-speed control interface . IDT 
is planning to launch a ...RC32332 integrated processors are used in xDSL 
gateways, SOHO routers, managed LAN switches and integrated access 
devi ces 

(IADS) . IDT 

has secured several significant design wins with these products and 
continues to see strong design... 

...leadership position in multi-port products 

with the industry's fastest and highest-density dual- ports . IDT 
is shipping 

9-Moit Bank-Swi tchable dual- ports 
and 4-Mbit true dual -ports at speeds up to 

166 MHz. These products are... 

...products greatly assist board designers in solving clock 



distribution problems, especially in today's high- speed 
telecommunications, 

networking and storage area network 
markets, with the addition of these new 

products, IDT now provides performance up to 200... 



17/3,K/10 (Item 3 from file: 621) 

DIALOG (r) Fi 1 e 621:Gale Group New Prod . Annou . (R) 
(c) 2006 The Gale Group. All rts. reserv. 

02821396 Supplier Number: 70978358 (USE FORMAT 7 FOR FULLTEXT) 
D-Link Slashes Pricing on Award Winning 11-Megabit IEEE 802.11b wireless 
Networking Products. 

PR Newswire, p6368 
March 2, 2001 

Language: English Record Type: Full text 
Document Type : Newswi re ; Trade 
Word Count: 1133 

point connection that creates an Infrastructure for the network or 
extends the reach of the network communications capability . The range 
of coverage per cell for indoor use is up to 100 meters and... 

... speed' wi rel ess Internet access, when the DWL-1000AP is connected to a 
dhcp Server the access point will automatically obtain an IP address 
and hand out IP address to all wireless adapters within range. The 
DWL-1000AP bandwidth data transmission rate can be set manually at 11Mbps 
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4602 MainStreet has complete control," said 
Newbridge president Peter Madsen, "from our smallest 2port Data 
Termination unit to our 3645 MainStreet, the world,s largest T-l 
multiplexer. Every device is part... 

. . . than smal 1 er , di st ri buted 
processors . 

Call setup, for example, requires only the configuration of one end 
port and the designation 
of the other end point. The 4602 configures 

the second port and establishes the connection... 
...to find and assign alternate routes. 

"as a result, we expect to reconnect all the channels in a failed 

T-l 

in less than 10 seconds after the line is declared lost," reported 
Madsen... 
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8000, RS 8600, and RS 38000 router product family. The new modules 
support full MPLS Label Edge Router (ler) and Label Switch Router 
(LSR) functions with these features: 

* MPLS label generation and forwarding at wire speed 

* up to 8,000 Label -Switched Paths (LSPs) per port 

* Multi -level label stacking 

* Layer 2 tunneling 

* Full support for Resource Reservation Protocol -Traffic Engineering 
(...a leading developer of routers and switches that enable service 

Eroviders throughout the metropolitan area network to turn raw 
andwidth into profitable services. Leveraging fourth-generation custom 
silicon and internet-hardened routing software, Riverstone products... 
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weighted-cost path routing. 

One key aspect of the Prestera packet processor is its advanced 
traffic management and QoS capabilities , which include eight priority 
queues with three drop precedences and WRED (weighted Random Early 
Discard). The traffic scheduling and bandwidth management helps ensure 
that packets are delivered on time to their final destinations. Advanced 
traffic policing and application-aware QoS and filtering also are supported 
by the packet processors to enable service - level agreements (SLAs) 
and provide network security. 

The Prestera 98MX620 and 98MX630 support MPLS for virtual Private 
Networks (VPNs) and traffic engineering with four labels. They perform the 
function either as a label -edge router (LER) by sitting on the edge of 
the MPLS networks and add tags... 

...switch traffic based on MPLS tags. 

Supporting L4 traffic engineering too, the chips provide network 
address and port translation and can perform L4 switching and load 
balancing. The packet processors can perform wire- speed 12 switching. 
Up to 16k MAC addresses are supported, along with up to 8k virtual... 

...rate filtering and port mirroring (802 . ls-compliant) . 

To provide the storage necessary for the packets , external 
double-data- rate drams are used. A 32-bit 66-mhz PCI interface provides a 



connection to a. 
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early implementations, MPLS involves the emergence of IP switching 
that uses label switching technology to speed up IP packet forwarding 
with small changes to existing routing protocols. The standardization of 
MPLS will not require... 

...label-switched path can be engineered to avoid a busy router in a large 
city. Label edge routers insert and remove Level 2 labels as they 
enter and exit an MPLS backbone network, based upon IP header information 
- such. 

...three label -switched paths, with each one supporting different levels or 
classes of services. Each port on an label edge router and label 
switching router may support many label -switched paths, with each 
label -swi tched path supporting one of the pre-assigned queues or... 

...Internetworking Forum and the internet Engineering Task Force) will be 
able to signal the optical network for additional bandwidth - that is, 
more wave-lengths - during periods of congestion . 

An optical virtual private network (VPN) operates across multiple 
managed wavelengths as a network that can be dynamically configured and... 



17/3.K/15 (Item 3 from file: 16) 

DIALOG(R) Fi 1 e 16: Gale Group PROMT (R) 
(c) 2006 The Gale Group. All rts. reserv. 

05484518 Supplier Number: 48310169 (USE FORMAT 7 FOR FULLTEXT) 
xedia's Access Point 100 brings IP bandwidth issues under control 

Piscitello, David M. 
InfoWorld, p58D 
Feb 23, 1998 

Language: English Record Type: Full text 
Document Type: Magazine/Journal; Trade 
word Count: 760 

apply controls at their network "edge" to regulate IP traffic, much 
the way committed information rate is used by frame -relay providers, to 
manage backbone capacity . Moreover, as ISPs attract subscribers from 
private-line enterprise networking to virtual networking services over... 

...technology provides traffic shaping and control at the IP layer, through 
policies configured into the Access Point itself. Traffic is classified 
by IP address , protocol, and port . Hierarchical CBQ traffic classes or 
"flows" represent an aggregation of traffic or a single connection. You 
allocate bandwidth and assign priorities to a traffic class, and the 
CBQ processing at the Access Point shapes traffic over the outbound port... 
...PCs connected to an Ethernet switch on the "send" LAN transmitted User 
Datagram Protocol (udp) traffic at a sustained rate of 2Mbps through 
the Access Point 100 bridge to PCs on a shared-medium Ethernet... 



...were measured as effective throughput by receiving PCs, in the absence 
of end-to-end flow control . 
Throttling bandwidth 

To demonstrate how Xedia's Access Point could be used to regulate or 
throttle bandwidth , I created a traffic class for udp traffic, set the 
maximum throughput to 4Mbps, and attempted to push an... 
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preserve existing infrastructure. Both devices provide a good 
solution for disparate workgroups requiring high-speed access to servers 
across multiple subnets. 

The immaturity of the Gigabit Ethernet market was apparent in our 
tests... 

...interoperability problems between the Foundry switches and a Gigabit 
Ethernet Alteon Networks inc. NIC. The link came up after we disabled 
the auto-negotiation feature on the NIC, but this situation illustrates the 
gambles taken when... 

...and advanced IP filtering capabilities. Netlron can filter based on 
source address, source mask, destination address , destination mask, and 
TCP or UDP port . Fastlron has similar capabilities but does not provide 
support for TCP and UDP (user Datagram... 

...inability to produce traps on the filtered events disappointing. 

Foundry breaks new ground in its ability to prune multicast 
traffic at Gigabit Ethernet speeds, in our tests, the switches could limit 
the multicast of IGMP... 
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digital network. . 
Ascend 1 s ISDN access and management system is designed to make the 
public network available to organizations with bandwidth -intensive data 
applications that would otherwise require expensive, dedicated private 
network facilities. Such applications include... 

...to implement and painstaking to manage, the officials said. 

"There are 25 manufacturers of terminal adapters , but nobody is 



addressing host or LAN access equipment said Robert Ryan, president 
and chief executive of Ascend. 

Added Jay Duncanson, founder and ISDN... 
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apply controls at their network "edge" to regulate IP traffic, much 
the way committed information rate is used by frame -relay providers, to 
manage backbone capacity . Moreover, as ISPs attract subscribers from 
private-line enterprise networking to virtual networking services over... 

...technology provides traffic shaping and control at the IP layer, through 
policies configured into the Access Point itself. Traffic is classified 
by IP address , protocol, and port . Hierarchical CBQ traffic classes or 
"flows" represent an aggregation of traffic or a single connection. You 
allocate bandwidth and assign priorities to a traffic class, and the 
CBQ processing at the Access Point shapes traffic over the outbound port... 
...PCs connected to an Ethernet switch on the "send" LAN transmitted user 
Datagram Protocol (UDP) traffic at a sustained rate of 2Mbps through 
the Access Point 100 bridge to PCs on a shared-medium Ethernet... 

...were measured as effective throughput by receiving PCs, in the absence 
of end-to-end flow control. 
Throttling bandwidth 

To demonstrate how xedia's Access Point could be used to regulate or 
throttle bandwidth , I created a traffic class for UDP traffic, set the 
maximum throughput to 4Mbps, and attempted to push an... 
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as v. 35 or RS-232; 

o Basic Set-up assigns a configuration password and enters the 
router 's IP addresses and system names; 

o Serial Link Set-up selects the WAN link speed , the link protocol, 
such as Frame Relay or x.25, as well as link names, poll timers, and call 
answering choices... 

...arrangement, including selecting the carrier ISDN switch type, enabling 
ISDN channels, and entering Service Provider Identifiers (SPID) and local 
numbers; 

o interface Configuration configures bridging and routing protocols 



and related link association as well as the assignment... 
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...TEXT: early implementations, MPLS involves the emergence of IP switching 
that uses label switching technology to speed up IP packet forwarding 
with small changes to existing routing protocols. The standardization of 
MPLS will not require... 

. . .label -switched path can be engineered to avoid a busy router in a large 
city. Label edge routers insert and remove Level 2 labels as they 
enter and exit an MPLS backbone network, based upon IP header 
information-such... 

. . .shows three labelswitched paths, with each one supporting different 
levels or classes of services. Each port on an label edge router 
and label switching router may support many label -switched paths, with 
each label -switched path supporting one of the pre-assigned queues or... 
internetworking Forum and the Internet Engineering Task Force) will be able 
to signal the optical network for additional bandwidth -that is, more 
wavelengths-during periods of congestion . 

,A 

An optical virtual private network (VPN) operates across multiple managed 
wavelengths as a network that can be dynamically configured and... 
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...abstract: products, including: 1. Packeteer inc.'s PacketShaper 1000, 
which uses TCP rate control to allocate bandwidth to inbound and outbound 
traffic that is classified by URL, applications, protocol, TCP port , or 
IP address , 2. xedia Corp.'s Access Point 10, which extends its 
class-based queuing system to include URL traffic classes, and 3... 
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.TEXT: two-, four-and eight-port models previously available. 

A new feature automatically assigns an IP address to each server port 
and, temporarily, to the user dialing in to that port. After the connection 
is terminated , the . server automatically assigns the address to the 
next dial -in customer. 

Other features include a new five-minute install utility... 



17/3, K/23 (Item 1 from file: 647) 

DIALOG (r) Fi 1 e 647: CMP Computer Full text 
(c) 2006 CMP Media, LLC All rts. reserv. 

01252629 CMP ACCESSION NUMBER: NWC20020610S0019 
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use NAT on all your clients. However, you can map NAT addresses to 
external IP addresses statically using the management interface . we 
found this feature helpful to support our access points , which, 
without IP addresses , would have been unreachable from the outside 
network. 

ReefEdge offers two versions of its ConnectBridge. . . 

. . .ConnectBridge 25 for support of a single access point only ; the 
ConnectBridge 100 supports higher speed traffic . The ConnectBridge 25 
is limited in capacity, we managed only 8 Mbps of throughput unencrypted 
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vpn dialer software installed, we attempted to connect to the 
Cisco VPN gateway through the access point . Once one vpn tunnel was 
established, we would establish another tunnel with a second client behind 
the access point to see if the device under test could handle multiple 
tunnels. If two worked, we would try a third. Most of the access points 

failed after the second, tunnel , usually. by terminating previously 
established vpn connections. 



Security Log test: For our security log test, we ran port scans on 



the various access points and checked to see if the logs would report 
the scans. Hackers often use port... 

...the LANguard Port Scanner on a Microsoft windows 2000 Professional 
workstation and scanned the WAN port IP addresses of the various 
access points . we then searched the configuration web pages for logs 
and looked to see if there... 
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side, it's important to understand exactly how NlCs fit into the 
design of your .network . 

On the server side, bandwidth and management requirements 
dominate. Bandwidth needs are addressed by both processor strength and the 
number. 

...deliver only 100 Mbps. On a very heavily trafficked server, this may 
not allow optimal access to server resources, to address this 
problem, multiple- port server cards let you add several connections to a 
server without eating up precious expansion... 

...minihubs or routers for smaller network installations. Because you can 
bind different protocols and network addresses to each port , multiple 
connections let you physically separate server-side traffic, creating 
multiple, separate subnets to access... 
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to implement and painstaking to manage, the officials said. 

"There are 25 manufacturers of terminal adapters , but nobody is 
addressing host or LAN access equipment said Robert Ryan, president 
and chief executive of Ascend. 

Added Jay Duncanson, founder and ISDN... 
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... ISP environment, we used 128k bit/sec ISDN lines with Lucent Pipelines 
as our ISDN access devices . The Pipelines handed out "private" (RFC 
1918) addresses and performed a Network Address and Port Translation 
(NAPT) function on all traffic, inside of one Pipeline devices, we set up 
the... 

... 10,000 simultaneous VPN users, we compared deployment and management 
functions, as well as the ability of the network to grow to support 
large user populations. We also looked at flexibility, to evaluate how... 
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Set items Description 

51 2237734 POINTER? ? OR ID? ? OR IDENTIFIER? ? OR IDENTIFICATION OR - 

ADDRESS??? OR LABEL? ? OR DESCRIPTOR? ? OR DESIGNATION? ? OR - 
DESIGNATOR? ? 

52 11770 Sl(7N)(PORT? ? OR INTERFACE? ? OR SOCKET? ? OR ADAPTER? ? - 

OR ADAPTOR? ? OR CONNECTOR? ? OR PLUG? ? OR DACK? ?) 

53 96004 (EXIT OR TERMINAT??? OR EDGE OR BOUNDARY OR ENTRY OR ENTER- 

??? OR ADMIT? OR ADMISSION OR ACCESS) (lW) (POINT? ? OR NODE? ? 
OR ELEMENT? ? OR UNIT? ? OR DEVICE? ? OR GATEWAY? ? OR ROUTER? 
? OR SWITCH? ? OR TERMINAL? ? OR SERVER? ?) 

54 15093 (EXIT OR TERMINAT??? OR EDGE OR BOUNDARY OR ENTRY OR ENTER- 

??? OR ADMIT? OR ADMISSION OR ACCESS) (lW) (PC? ? OR COMPUTER? ? 
OR EQUIPMENT? ? OR BOX?? OR HARDWARE OR MACHINE) 

55 1098 Sl(7N)S3:S4 

56 18584 (INCOMPLETE OR UNFINISHED OR PARTIAL OR BROKEN OR DESTROYED 

OR LOST OR DISABLED OR UNAVAILABLE OR FAILED OR INVALID OR F- 
ALSE OR EMPTY OR VACANT) (5 N) (PATH? ? OR PATHWAY? ? OR CONDUIT? 

? OR TRAIL? ? OR LINK? ? OR CHANNEL? ? OR TUNNEL? ? OR PASSA- 
GE? ?) 

57 3790 (INCOMPLETE OR UNFINISHED OR PARTIAL OR BROKEN OR DESTROYED 

OR LOST OR DISABLED OR UNAVAILABLE OR FAILED OR INVALID OR F- 
ALSE OR EMPTY OR VACANT) (5 N) (PASSAGEWAY? ? OR ROUTE? ? OR COU- 
RSE? ?) 

58 439921 (TRAFFIC OR FLOW OR MESSAGE OR PACKET? ? OR FRAME? ? OR NE- 

TWORK) (5N) (CAPABILIT??? OR ABILIT??? OR SLA OR SERVICE() LEVEL- 
()AGREEMENT? ? OR CAPACITY OR BANDWIDTH OR BAND () WIDTH OR CON- 
GESTION OR LATENCY OR RATE OR DATARATE OR SPEED) 

59 0 S2 AND S5 AND S6:S7 AND S8 

510 0 S2 AND S5 AND S6:S7 

511 2 S2 AND S5 AND S8 

512 0 S2 AND S3:S4 AND S6:S7 AND S8 

513 0 S2 AND S3:S4 AND S6:S7 

514 3 S2 AND S3:S4 AND S8 
r Sl5 3 Sll OR S14 
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Title: compact neighbor discovery (A bandwidth defense through bandwidth 
optimization) 

Author: Mutaf, Pars; Castelluccia, Claude 
Conference Title: IEEE INFOCOM 2005 

Conference Location: Miami, FL, united States Conference Date: 
20050313-20050317 

Sponsor: IBM; excellence Next, eNext; NSF 
E.I. Conference No.: 65679 

Source: Proceedings - IEEE INFOCOM Proceedings - IEEE INFOCOM 2005. The 
Conference on Computer Communications - 24th Annual Doint Conference of the 
IEEE Computer and Communications Societies v 4 2005. (IEEE cat n CH37645) 

Publication Year: 2005 

CODEN: PINFEZ ISSN: 0743-166X 

Language: English 

Document Type: CA; (Conference Article) Treatment: T; (Theoretical) 
journal Announcement: 0510W3 

Abstract: we present a stateless defense against the Neighbor Discovery 
Denial -of -Service (nd-doS) attack in IPv6. The nd-doS attack consists of 
remotely flooding a target subnet with bogus packets destined for random 
interface identifiers ; a different one for each malicious packet. The 
128-bit IPv6 address reserves its 64 low-order bits for the interface ID 
. Consequently, the malicious packets are very likely to fall on 
previously unresolved addresses and the target access router (or 
leaf router) is obligated to resolve these addresses by sending neighbor 
solicitation packets. Neighbor solicitation packets are link layer 
multicast (or broadcast), and hence also forwarded by bridges. As a 
consequence, the attack may consume important bandwidth in subnets with 
wireless bridges, or access points . This problem is particularly 
important in the presence of mobile IPv6 devices that expect incoming 
sessions from the internet, in this case, address resolution is crucial 
for the access router to reliably deliver incoming sessions to idle 
mobile devices with unknown MAC addresses, we propose a novel neighbor 
solicitation technique using Bloom filters. Multiple IPv6 addresses (bogus 
or real) that are waiting in the access router ' s address resolution 
queue are compactly represented using a Bloom filter. By broadcasting a 
single neighbor solicitation message that carries the Bloom filter, 
multiple IPv6 addresses are concurrently solicited. Legitimate neighbor 
solicitation triggering packets are not denied service. An on-link host, 
can detect its address in the received Bloom filter and return its MAC 
address to the access router . A bandwidth gain around 40 can be 
achieved in all cells of the target subnet. This approach that we call 
Compact Neighbor Discovery (CND) is the first bandwidth DoS defense that 
we are aware of to employ a bandwidth optimization, copy 2005 IEEE. 17 
Refs. 
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Abstract: Frame relay is a standardized interface that provides 
multiplexed access to bandwidth-on-demand backbone networks and delivers 
LAN-like performance over a wide area. It is shown that use of frame relay 
can benefit private networks. The multiplexed physical interface reduces 
the number of ports required on expensive bridge, router, and controller 
equipment, as well as the number of expensive communications facilities 
required to interconnect the bridges, routers, and controllers. Frame 
relay's data link connection identifier (DLCI) addressing allows a single 
frame- relay access device to communicate as if directly attached to 
nearly 1000 other access devices . The bandwidth-on-demand 
characteristics gives end systems and intermediate systems the appearance 
of having far more bandwidth available than they physically have dedicated, 
and the optional local management interface (lmi) extensions simplify the 
configuration and management of frame- relay-based networks. Most important 
is that the application of frame relay interfaces reduces the latency 
of private networks. 12 Refs. 

Descriptors: ^COMPUTER NETWORKS- -*wide Area Networks; COMPUTER INTERFACES 
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Document Type: P (Serial); C (Conference Proceedings) ; A (Analytic) 
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Enhanced network services often involve allocating resources ( 
bandwidth /buffer space) preferentially to packets belonging to certain 
flows or traffic classes. Such services are vulnerable to denial -of -service 
attacks if packet classification is based on information that can be 
forged, such as source and destination addresses and port numbers. 
Traditional message authentication codes (macs) , often considered the only 
solution to this problem, are really not designed to solve it. In 



particular, their per-packet costs are so high that they enable another 
form of denial -of -service attack based on overwhelming the verification 
mechanism. We describe the problem of denial of access to reserved 
resources and the inadequacies of conventional solutions, we then observe 
that it is reasonable to trade some of the strong security guarantees 
provided by conventional MACS for a lower per-packet cost, we propose a new 
packet authentication algorithm, designed to solve the problem of 
protecting reserved resources, with a very low, fixed per-packet cost, 
while it cannot replace conventional macs for end-to-end authentication, we 
argue that it is a better solution for the problem considered here, we 
present measurements from a prototype implementation that can verify a 
packet of arbitrary size in as few as 1000 machine cycles on an Intel 
architecture machine. 
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